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The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing dale of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)13 Responsive to communication(s) filed on 17 October 2007 . 
2a)M This action Is FINAL. 2b)n This action is non-final. 

3) n Since this application is in condition for allowance except for fomrial matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) EI Claim(s) 1-13.15-18 and 21-28 is/are pending in the application. 

4a) Of the above clalm(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) |EI Claim(s) 1-13. 15-18. 21-28 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: 3)0 accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing{s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawlng(s) is objected to. See 37 CFR 1.121(d). 

11) n The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) n Acknowledgment Is made of a claim for foreign priority under 35 U.S.C. § I19(a)-(d) or (f). 
a)n All b)n Some * c)n None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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3) □ Information Disclosure Statement(s) (PTO/SB/08) 5) □ Notice of informal Patent Application 

Paper No(s)/Mail Date . 6) □ Other: _. 
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DETAILED ACTION 
Response to Arguments 

Applicant's arguments filed 10/17/2007 have been fully considered but they are not persuasive. 

The Applicant argues that the Swift reference fails to disclose the negotiation of encryption 
algorithms. That is, two computers negotiate to change an encryption algorithm. 

Swifts discloses the changing of password protocols see Page 3 last sentence bridging onto 
Page 4. And further discloses that the appropriate keytypes being generated from the 
password see Page 3 Par. 2. And this keytypes is being used to encrypt a packet; thus by 
extension changing of password protocol implicitly changes the encryption algorithms (i.e. 
keytypes being changed). And additionally, Swift mentions encapsulation(no encapsulation) 
which is associated with the version of protocol see Page 3 Par. 4 " The server..." 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for 
the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless — 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on sale in this 
country, more than one year prior to the date of application for patent in the United States. 

Claims 1-2, 7-9, 24-26 are rejected under 35 U.S.C. 102(b) as being anticipated by RFC 3244- 
Microsoft Windows 2000 Kerberos Change Password arid Set Password Protocols by Swift et 
al. (hereinafter Swift). 
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Regarding Claim 1, Swift discloses the receiving a encryption algorithm request wherein the request 
specifies an encryption algorithm for subsequent communications between client and server see 
Page 2 "Request Message'' protocol version number; sending a subsession key to the client, wherein 
the subsession key may be used in conjunction with encryption algorithm to encrypt future messages 
see Page 3 " Reply Message" AP-REP data. 

Regarding Claim 2, Swift discloses the sending and receiving as part of a authentication protocol see 
Page 3 Par. 1. 

Regarding Claim 7, Swift discloses the deriving of algorithm from key see Page 3 Par. 2 "The 
newpasswd 

Regarding Claim 8, Swift disclose sending an encryption algorithm request to server indicating that a 
client computer supports a specified encryption algorithms see Page 4 

"I<RB5_KPASSWD_BAD_VERSION"; anticipating a subsession key with encryption algorithms 
see Page 2 "Request Message"; switching to specified algorithm if the subsession key is delivered see 
Page 3 "AP-REP data" & Page 2 "AP-REQ data". 

Regarding Claim 9, Swift discloses the authenticating a server computer see Page 2 "KRB_PRIV 
message". 
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Regarding Claim 24, Swift discloses the receiving a encryption algorithm request wherein the request 
specifies an encryption algorithm for subsequent communications between client and server see 
Page 2 "Request Message" protocol version number and sending and receiving as part of a 
authentication protocol see Page 3 Par, 1; the switching to specified algorithm if the subsession key 
is delivered see Page 3 "AP-REP data" & Page 2 "AP-REQ data. 

Regarding Claim 25-26, Swift discloses the encrypting of AP-REQ using an algorithm see Page 3 
Par. 1. 

Claim Rejections - 35 US C § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness rejections 

set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 102 
of this title, if the differences between the subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill in the art 
to which said subject matter pertains. Patentability shall not be negatived by the manner in which the invention was 
made. 

Claims 3-6,10-13, 15-18 , 21-23, 27-28 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over RFC 3244-Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols 
by Swift et al. (hereinafter Swift) in view of rpcsec_gss, kadmin service principal, etc by Coffman, 
Kevin. , 

Regarding Claim 3, 10, 23, 27, Swift does not disclose the gss interface for authentication protocol. 
However, Coffman discloses the gss interface for authentication protocol see Page 1 Par. 3 "The 
kpasswd. . It would be obvious to one having ordinary skill in the art at the time of the invention 
to include the GSSAPI in the invention of Swift in order to include the protocol in a package or 
suite akin to RPC. 
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Regarding Claim 4, 11, Swift discloses the AP-REQ see Page 2- The Protocol Par. 1. 

Regarding Claim 5-6, 12-13, 22, Swift discloses the encrypting of AP-REQ using an algorithm see 
Page 3 Par. 1. 

Regarding Claim 15, Swift discloses the receiving a encryption algorithm request wherein the 
request specifies an encryption algorithm for subsequent communications between client and server 
see Page 2 "Request Message'' protocol version number; the. authenticating a server computer see 
Page 2 "I<RB_PRIV message"; client ^computer supports a specified encryption algorithms see Page 
4 "KRB5_KPASSWD_BAD_VERSION". Swift does not disclose the gss interface for 
authentication protocol. However, Coffman discloses the gss interface for authentication protocol 
see Page 1 Par, 3 "The kpasswd. . It would be obvious to one having ordinary skill in the art at the 
time of the invention to include the GSSAPI in the invention of Swift in order to include the 
protocol in a package or suite akin to RPC. 

Regarding Claim 16-17, Swift discloses the deriving of algorithm from key see Page 3 Par. 2 "The 
newpasswd 



Regarding Claim 18, Swift discloses the switching to specified algorithm if the subsession key is 
delivered see Page 3 "AP-REP data" & Page 2 "AP-REQ data". 
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Regarding Claim 21, Swift discloses the sending and receiving as part of a authentication protocol 
see Page 3 Par. 1 . 

Regarding Claim 28, Swift discloses the flag in a checksum see Page 2 KRB-PRIV. 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as set 
forth in 37 CFR 1.136(a). A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not mailed until 
after the end of the THREE-MONTH shortened statutory period, then the shortened statutory 
period will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, however, 
will the statutory period for reply expire later than SIX MONTHS from the mailing date of this final 
action. 

Any inquiry concerning this communication or earlier communications from the examiner should be 
directed to Venkat Perungavoor whose telephone number is 571-272-7213. The examiner can 
normally be reached on 8:30-5:00. If attempts to reach the examiner by telephone are unsuccessfial, 
the examiner's supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone 
number for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be 
obtained from either Private PAIR or Public PAIR. Status information for unpublished applications 
is available through Private PAIR only. For more information about the PAIR system, see 
http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR system, 
contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like 
assistance from a USPTO Customer Service Representative or access to the automated information 



system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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Venkat Perungavoor 
Examiner 
Art Unit 2132 
November 20, 2007 
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